We always say that Bucknell will never ask you for your username and password, and if you ever are asked for it, it’s a phishing scam, and you should just delete the email.

At UVA this month, employees who responded to a phishing scam caused an enormous security breach – it can happen everywhere! Here are the details, which are timely, since W-2s are now available across campus right now.

The data breach involved the use of a “phishing” scheme, where hackers sent emails to university staffers asking them to click on a link and provide their account log-in information and passwords. The W-2 forms hacker stole likely include personally identifiable information such as home addresses and social security numbers.